Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/Y7mpLNYAxNrmVFE668fj26_4slk.roa
File: Y7mpLNYAxNrmVFE668fj26_4slk.roa (raw, json)
Hash identifier: sStKHdLvZFVko1S3+XaMnFnoZ14/U/Jcc7V7adFjD7Q=
Subject key identifier: 63:B9:A9:2C:D6:00:C4:DA:E6:54:51:3A:EB:C7:E3:DB:AF:F8:B2:59
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 019DC1BDAD5204260CCC3B92D3F2F99AEAE5
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/Y7mpLNYAxNrmVFE668fj26_4slk.roa
Signing time: Fri 24 Apr 2026 23:05:26 +0000
ROA not before: Fri 24 Apr 2026 23:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42037
IP address blocks: 185.155.180.0/22 maxlen: 24
2a00:8c40::/32 maxlen: 48
2a00:8c40:238::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c1:bd:ad:52:04:26:0c:cc:3b:92:d3:f2:f9:9a:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Apr 24 23:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63b9a92cd600c4dae654513aebc7e3dbaff8b259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:09:5b:74:c6:ae:71:e7:c5:c1:25:4d:38:
4c:87:3e:46:49:61:69:db:bc:58:8e:42:0d:b9:36:
03:48:c3:7c:ca:8e:71:f3:00:e0:8f:f8:c1:4f:24:
ca:41:6f:9d:e9:1a:7a:47:e8:1e:bb:59:cd:63:f6:
b1:5a:5f:a0:8d:03:77:8a:8f:dc:cf:36:7e:43:66:
a8:3e:f7:05:1d:eb:3d:a7:76:62:8f:f0:a3:e4:e0:
08:b6:ad:37:58:88:3e:de:8e:e0:b0:dc:65:10:59:
33:c4:e2:97:7f:8f:56:33:3c:f3:2b:08:85:ef:ff:
a8:77:37:d2:46:ab:72:bf:67:e5:80:b9:b0:6f:00:
46:94:46:65:22:5c:c0:a7:dc:ed:87:e9:ec:d3:5d:
e7:f3:d7:9a:40:50:3d:3d:d7:fb:33:c5:87:da:78:
23:9e:db:1f:ba:48:99:40:8b:87:e8:88:34:bb:4d:
97:6d:45:8d:32:65:c6:14:75:2b:ef:56:99:ca:44:
61:c0:4b:e5:63:ef:31:80:c5:d3:b1:4c:b0:4c:af:
fd:5c:e3:1e:72:24:f5:c5:a6:41:82:3c:cf:df:f3:
93:db:dd:f4:b3:22:b3:9e:79:d7:af:3e:01:64:5f:
4b:76:13:1c:49:0f:0c:b5:d6:e7:e3:5a:b3:0c:19:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B9:A9:2C:D6:00:C4:DA:E6:54:51:3A:EB:C7:E3:DB:AF:F8:B2:59
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/Y7mpLNYAxNrmVFE668fj26_4slk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.180.0/22
IPv6:
2a00:8c40::/32
Signature Algorithm: sha256WithRSAEncryption
28:c2:08:2f:75:a2:d9:61:23:22:0e:83:25:d4:49:c1:69:a2:
11:68:21:ce:4c:da:77:ac:35:76:01:cc:a1:a6:ab:2f:be:91:
3e:ad:5e:a0:60:38:bd:48:f9:b3:51:8b:51:14:f5:e7:41:e5:
68:38:0b:41:41:35:86:99:27:03:77:e2:05:f0:3f:dd:c0:38:
08:60:84:dd:26:41:b1:af:12:4a:15:d2:53:42:ef:c9:7a:17:
a1:d7:8e:10:d7:23:33:0b:9d:9f:47:78:b8:e7:f1:d4:3d:39:
b6:5e:cc:c5:79:08:ec:ef:2f:6b:1a:98:72:6c:3f:d2:5c:e8:
96:62:e1:bc:70:88:10:2c:48:6e:1f:4f:9d:bd:1d:f3:f9:2f:
6a:57:96:69:af:a3:0a:28:ac:fc:17:00:46:4a:bd:9b:fa:ff:
33:21:ea:62:74:72:bb:f6:df:ad:8e:fd:0c:f2:f7:78:90:31:
4a:97:79:98:80:2e:31:cd:c5:d3:a2:54:81:c7:8e:f4:b5:e4:
6b:a5:2b:fb:ee:c0:4b:77:ac:ec:5c:d1:dd:36:63:33:69:94:
25:48:a0:8b:04:8d:63:50:2b:0b:22:64:d8:ec:6a:3b:42:d8:
6c:cf:e8:1d:8f:2c:13:f1:d2:19:1c:a8:d7:36:fa:21:5b:ff:
e2:61:2d:c3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ3Bva1SBCYMzDuS0/L5murlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWYwMTg4MWI3M2M4ZTliNWQ5MjIzOTIyOWE2ZTUxMmVj
YTRlN2MwHhcNMjYwNDI0MjMwNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2I5YTkyY2Q2MDBjNGRhZTY1NDUxM2FlYmM3ZTNkYmFmZjhiMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sUJW3TGrnHnxcElTThMhz5GSWFp
27xYjkINuTYDSMN8yo5x8wDgj/jBTyTKQW+d6Rp6R+geu1nNY/axWl+gjQN3io/c
zzZ+Q2aoPvcFHes9p3Zij/Cj5OAItq03WIg+3o7gsNxlEFkzxOKXf49WMzzzKwiF
7/+odzfSRqtyv2flgLmwbwBGlEZlIlzAp9zth+ns013n89eaQFA9Pdf7M8WH2ngj
ntsfukiZQIuH6Ig0u02XbUWNMmXGFHUr71aZykRhwEvlY+8xgMXTsUywTK/9XOMe
ciT1xaZBgjzP3/OT2930syKznnnXrz4BZF9LdhMcSQ8Mtdbn41qzDBkmBwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGO5qSzWAMTa5lRROuvH49uv+LJZMB8GA1UdIwQY
MBaAFO8fAYgbc8jptdkiOSKablEuyk58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYt
NTUxMzFjYzFlZmVhLzEvWTdtcExOWUF4TnJtVkZFNjY4ZmoyNl80c2xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYtNTUxMzFjYzFlZmVh
LzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZu0MA0E
AgACMAcDBQAqAIxAMA0GCSqGSIb3DQEBCwUAA4IBAQAowggvdaLZYSMiDoMl1EnB
aaIRaCHOTNp3rDV2AcyhpqsvvpE+rV6gYDi9SPmzUYtRFPXnQeVoOAtBQTWGmScD
d+IF8D/dwDgIYITdJkGxrxJKFdJTQu/Jeheh144Q1yMzC52fR3i45/HUPTm2XszF
eQjs7y9rGphybD/SXOiWYuG8cIgQLEhuH0+dvR3z+S9qV5Zpr6MKKKz8FwBGSr2b
+v8zIepidHK79t+tjv0M8vd4kDFKl3mYgC4xzcXTolSBx470teRrpSv77sBLd6zs
XNHdNmMzaZQlSKCLBI1jUCsLImTY7Go7Qthsz+gdjywT8dIZHKjXNvohW//iYS3D
-----END CERTIFICATE-----
Generated at Sun May 3 19:32:30 2026 by rpki-client